
クリプトータス
Cryptortoise
Plug in your FIDO2 key to unlock everything.
Pull it out to lock everything.
Hardware-key-based directory encryption for Linux. Zero passwords. Ever again.
No Passwords
Your FIDO2 hardware key derives encryption keys on demand. Nothing to remember. Nothing to leak.
Magnetic Snap
Magnetic USB-C connector. Snap on to unlock. Pull off to lock. Walk away and your data seals itself.
One Key. Done.
A single hardware key replaces all your passwords. Pre-flashed and ready to plug in.
仕組み
How It Works
KEY PLUGGED IN
USB detected
▼
FIDO2 HMAC key derived
▼
gocryptfs mounts vaults
▼
Symlinks restored
▼
UNLOCKED
KEY REMOVED
USB removal detected
▼
Keys wiped from memory
▼
gocryptfs unmounts
▼
Symlinks removed
▼
LOCKED
機能
Features
Directory Encryption
Encrypt any directory with hardware-derived keys via gocryptfs
Browser Protection
Encrypt Brave, Firefox, and LibreWolf profiles transparently
App Config Encryption
Protect Discord, Steam, and other app configs with one command
Credential Vault
Store passwords encrypted at rest with your FIDO2 key
Software Passkeys
Track and manage FIDO2 passkeys across sites
System Tray Daemon
Auto-locks on key removal, auto-unlocks on insertion
File Manager Integration
Right-click encrypt/decrypt in Nautilus, Nemo, Caja, Dolphin, Thunar
Browser Extension
Autofill credentials and manage passkeys in Brave/Firefox
PAM Integration
Unlock encrypted vaults automatically at login
Setup Wizard
Guided first-run configuration with GTK4 UI
対応アプリ
Supported Apps
Brave
Browser
Full profile — history, passwords, cookies, extensions
Firefox
Browser
Full profile — logins, bookmarks, session data
LibreWolf
Browser
Full profile — privacy-first Firefox fork
Discord
Chat
Config, tokens, cache
Steam
Gaming
Config, saved credentials, VDF files
GNOME Keyring
System
Stored passwords and secrets
Proton Mail
Email
IMAP/SMTP credentials, config
Any Directory
Custom
cryptortoise encrypt <path> works on anything
手に入れる
Get Yours
CRYPTORTOISE KEY
$30
Pre-flashed. Tested. Plug in and go.
- FIDO2 hardware key with firmware pre-loaded
- Magnetic USB-C snap connector — just snap on to unlock, pull off to lock
- 540° rotating swivel, 480Mbps data, 240W passthrough
- Tested & verified before shipping
- Setup support from the developer
Ships worldwide. No account required.
1
Buy the key
Pre-flashed, ready to use out of the box
2
Install the software
sudo apt install cryptortoise
or: dnf install cryptortoise • yay -S cryptortoise • manual install3
Plug in & run setup
cryptortoise setupAdvanced: Build your own key
Cryptortoise is open source. If you want to source and flash your own hardware:
- Get a Raspberry Pi Pico (~$5)
- Flash Pico FIDO firmware (UF2)
- Install Cryptortoise from GitHub
Any FIDO2 key with hmac-secret support works (YubiKey 5, SoloKeys, Nitrokey).

